mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
49 lines
1.3 KiB
Plaintext
49 lines
1.3 KiB
Plaintext
server {
|
|
listen 80;
|
|
|
|
location /api {
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_pass http://backend:4000;
|
|
proxy_redirect off;
|
|
|
|
proxy_cookie_path / "/; HttpOnly; SameSite=strict";
|
|
}
|
|
|
|
location /.well-known/est {
|
|
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_set_header X-SSL-Client-Cert $ssl_client_escaped_cert;
|
|
|
|
proxy_pass http://backend:4000;
|
|
proxy_redirect off;
|
|
|
|
# proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
|
|
proxy_cookie_path / "/; HttpOnly; SameSite=strict";
|
|
}
|
|
|
|
location / {
|
|
include /etc/nginx/mime.types;
|
|
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
proxy_pass http://frontend:3000;
|
|
proxy_redirect off;
|
|
}
|
|
} |